Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Critical9.8Plack::Middleware::Session::Simple versions before 0.05 for Perl generates session ids insecurely.CVE-2025-40926 · kazeburo · plack · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Mar 5, 2026
Medium6.5HTTP::Session2 versions before 1.12 for Perl for Perl may generate weak session ids using the rand() function.CVE-2026-3255 · tokuhirom · http · CVE.org · NIST NVDFeb 27, 2026
High8.2Apache::SessionX versions through 2.01 for Perl create insecure session id.CVE-2025-40932 · grichter · apache · CVE.org · FIRST EPSS · NIST NVD · ApacheEPSS 0.2%Feb 27, 2026
Critical9.1Smolder versions through 1.51 for Perl uses insecure rand() function for cryptographic functions.CVE-2024-58041 · wonko · smolder · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Feb 24, 2026
High7.2Use of a weak pseudo-random number generator, which may allow an attacker to read or inject encrypted PowerG packets.CVE-2025-26379 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%Dec 22, 2025